Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
File:                     V88585q2G1OO6nyy1Wo0vle4mvs.mft (raw, json)
Hash identifier:          XugrarFJ09v6HWuZSTUy/dHg0yTUpjWpc6ju3jE+uPc=
Subject key identifier:   7F:34:A3:1E:2A:51:A4:7F:07:C6:2F:3C:6E:00:DF:9E:D7:C4:FE:B5
Authority key identifier: 57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB
Certificate issuer:       /CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
Certificate serial:       058C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
Manifest number:          0588
Signing time:             Fri 26 Apr 2024 14:54:02 +0000
Manifest this update:     Fri 26 Apr 2024 14:54:01 +0000
Manifest next update:     Fri 03 May 2024 14:54:01 +0000
Files and hashes:         1: V88585q2G1OO6nyy1Wo0vle4mvs.crl (hash: vj+dcT+pKezp3Y1SVIMkb1RY2KzeKJFKIIajWntV2PY=)
                          2: 6DB6146E0E2F11EDB4659653C4F9AE02.roa (hash: ZPd0b5pncSqHwdSF6B6PNBDvF8PT+k9dwuzN/M5HIvU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl
                          rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 14:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D4C4/serialNumber=57CF39F39AB61B538EEA7CB2D56A34BE57B89AFB
        Validity
            Not Before: Apr 26 14:54:01 2024 GMT
            Not After : May  3 14:54:01 2024 GMT
        Subject: CN=662bc009-13c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:07:89:46:cf:0c:32:f0:56:c4:d5:b3:f6:
                    25:9d:a0:d0:a0:bd:ea:e8:c0:92:ff:59:fa:9e:a9:
                    97:20:7d:8d:d0:b8:db:ad:67:af:b0:69:c4:15:d4:
                    b8:0c:01:a9:63:8e:34:30:40:ae:f4:52:8f:df:a4:
                    3c:c8:f8:ba:b5:a3:5d:11:85:79:31:22:2c:17:33:
                    48:c8:57:12:d1:3a:92:d2:22:19:0a:39:33:68:6b:
                    6d:e3:63:dc:5f:d3:b3:65:df:8e:38:6d:8b:01:dd:
                    c9:84:5b:28:6d:50:7f:a8:0b:3f:5b:69:82:67:bf:
                    2f:76:36:55:1c:59:25:b8:a6:fd:3a:96:e4:aa:0d:
                    35:08:d0:a3:27:2a:9f:c1:01:09:c7:a1:85:55:b4:
                    80:8e:b3:cd:94:d2:8f:c2:92:85:25:1f:5c:ba:63:
                    a6:7d:08:fe:3c:55:b9:01:43:ce:bb:7a:96:0b:c2:
                    1c:74:4a:54:8d:24:3d:23:18:cf:38:28:40:e7:f2:
                    5d:e6:18:65:51:a9:57:03:56:0c:a2:29:00:bd:12:
                    19:75:ae:f1:87:2f:c5:e5:41:a6:bf:7f:93:b5:a0:
                    75:2c:da:32:86:25:a5:aa:ed:4e:30:7d:77:bd:fe:
                    cc:f1:7e:b6:cb:38:ea:1d:7e:74:1c:73:ca:9e:5d:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:34:A3:1E:2A:51:A4:7F:07:C6:2F:3C:6E:00:DF:9E:D7:C4:FE:B5
            X509v3 Authority Key Identifier:
                keyid:57:CF:39:F3:9A:B6:1B:53:8E:EA:7C:B2:D5:6A:34:BE:57:B8:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V88585q2G1OO6nyy1Wo0vle4mvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D4C4/3A07E0BA8D7B11EB8D8BD60BC4F9AE02/V88585q2G1OO6nyy1Wo0vle4mvs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:8f:0d:4b:e2:d5:14:ca:86:8a:1e:73:7a:3c:5a:51:f2:
         82:4e:29:a7:ec:5b:0e:71:16:46:1f:46:3c:3d:a8:14:4e:41:
         2e:9f:40:bb:26:f9:c5:9b:c2:82:87:0b:94:8d:38:f3:6b:e1:
         fe:9b:7c:f3:bc:06:1f:a4:79:f1:92:82:7e:65:82:3b:f8:0a:
         71:b9:f1:4d:a1:11:02:41:b7:e3:3d:17:e6:3d:9e:3e:cb:40:
         7c:59:12:79:5c:b2:9d:62:22:45:b2:34:5f:65:c4:0d:d7:41:
         0a:13:c3:43:6a:fd:f1:fa:23:a2:a6:b6:af:25:04:a1:8e:19:
         38:fc:5b:76:dc:ed:eb:50:42:b9:f0:02:8a:ee:ef:0b:9c:da:
         25:8f:ce:76:ea:74:9f:c2:44:61:b9:93:74:bd:2b:94:be:2a:
         e4:9e:4c:e5:64:69:0d:29:0a:51:13:d8:3a:91:36:67:3e:a7:
         53:72:59:41:7a:4e:8d:a9:29:19:a7:83:8e:53:14:de:02:6f:
         83:16:d1:82:c9:41:69:2d:72:8f:cc:63:83:bd:eb:7b:b7:d1:
         8a:60:5e:d3:54:c6:e6:11:58:1a:df:de:36:47:52:e7:73:1b:
         00:ff:07:ec:39:c2:db:ef:57:64:0a:45:36:32:7c:6e:a2:d2:
         85:71:a1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:15 2024 by rpki-client on console-ams.rpki-client.org